- Update apt packages before checking essentials task (#1086)
- Setup composer HTTP basic authentication for multiple repositories (#1091)
- Prevent direct access for
.blade.php
files (#1075) - Show custom error message if external IP resolution fails (#1078)
- Use all canonical site hosts for Landrush TLD (#1077)
- Improve handling of vars with
AnsibleUnsafe
(#1071) - Update name of Nginx PPA (
development
tomainline
) (#1068) - [REVERT] Don't force install Ansible Galaxy in dev (#1064)
- Add Python 2 explicitly (#1061)
- Hyper-V and SMB folder sync compatibility (#1035)
- Use Ruby script for ssh-config trigger (#1053)
- Update to PHP 7.3 (#1052)
- Enable per-user
update_password
behavior (#767) - Fix Vagrant trigger path (#1051)
- Fix:
vault_wordpress_env_defaults
not populated during deploy (#1049) - Add
vault_wordpress_env_defaults
(#1048) - Allow overriding rollback variables (#1047)
- Require Vagrant >= 2.1.0 (#1046)
- Bump Ansible
version_tested_max
to 2.7.5 (#1045) - Add Vagrant
ssh-config
to~/.ssh/config
onvagrant up
(#1042) - [BREAKING] Add Ubuntu 18.04 support and default to it (#992)
- Python 3 support (#1031)
- Allow customizing Nginx
worker_connections
(#1021) - Update wp-cli to 2.0.1 (#1019)
- [BREAKING] Update wp-cli to 2.0.0 and verify its PGP signature (#1014)
- Deploy: Remove obsoleted
git
remote checking (#999) - Update xdebug tunnel configuration (#1007)
- Verify
wp-cli.phar
checksum (#996) - Enable
fastcgi_cache_background_update
by default (#962) - Bump Ansible
version_tested_max
to 2.5.3 (#981) - deploy.sh: Return non-zero exit code when misuse (#990)
- Add CSP
frame-ancestors
, makeX-Frame-Options
conditional (#977) - Common: Install
git
instead ofgit-core
(#989) - Add
xdebug.remote_autostart
to simplify xdebug sessions (#985) - Enable nginx to start on boot (#980)
- Update geerlingguy.ntp 1.5.2->1.6.0 (#984)
- Update geerlingguy.composer 1.6.1->1.7.0 (#983)
- Update wp-cli to 1.5.1 (#982)
- Support git url format
ssh://user@host/path/to/repo
(#975) - Fix path to h5bp/mime.types (#974)
- Vendor h5bp Nginx configs (#973)
- Add support for sSMTP revaliases configuration (#956)
- Add support for includes.d on all sites (#966)
- Fix
--subdomains
flag in the Install WP task (#968) - Ensure Diffie-Hellman group is generated for Let's Encrypt (#964)
- Fix
raw_vars
feature to properly handle int values (#959) - [BREAKING] Update Ansible default plugin paths in config files (#958)
- Add Nginx
ssl.no-default.conf
to drop requests for unknown hosts (#888) - [BREAKING] Disable memcached UDP support by default (#955)
- Git: Ignore
vagrant.local.yml
(#953) - Update to PHP 7.2 (#929)
- Fix
failed_when
intemplate_root
check with wp-cli 1.5.0 (#948) - Bump Ansible
version_tested_max
to 2.4.3.0 (#945) - Update wp-cli to 1.5.0 (#944)
- Update
vagrant_box_version
to>= 201801.02.0
(#939) - Bump Ansible
version_tested_max
to 2.4.2.0 (#932) - Add MariaDB 10.2 PPA (#926)
- Switch from
.dev
to.test
(#923)
- Update wp-cli to 1.4.1 (#918)
- Disallow duplicate site keys within a host's
wordpress_sites
(#910) - Fix
raw_vars
functionality for Ansible 2.4.1 (#915) - Enable Virtualbox ioapic option (#913)
- Dynamically increase
ansible_group_priority
for selected env (#909) - Bump Ansible
version_tested_max
to 2.4.1.0 (#911) - Update wp-cli to 1.4.0 (#906)
- [BREAKING] Normalize
apt
tasks (#881) - Ansible 2.4 compatibility (#895)
- Default h5bp expires and cache busting to false (#894)
- Deploys: Update WP theme paths for multisite subsites (#854)
- Vagrant: Support DHCP (#892)
- Extract Trellis::Config (#890)
- Redirect directly to https canonical domain (#889)
- WordPress Setup: Add Nginx
ssl_client_certificate
(#869) - Update h5bp/server-configs-nginx (#876)
- Update ansible galaxy roles (#872)
- Update wp-cli to 1.3.0 (#871)
- Add ansible_local support for non-Windows (#824)
- Load
modules-enabled
config files in Nginx (#859) - Only include *.conf files in Nginx
sites-enabled/
(#862) - Add
fastcgi_read_timeout
to Nginx config (#860) - Allow customization of the Nginx package name and PPA (#858)
- Nginx microcaching: skip caching WP API requests (#855)
- Allow overriding more php-fpm params (#856)
- Accommodate child themes: Update WP
stylesheet_root
separately (#850) - Deploys:
--skip-themes
when updating WPtemplate_root
(#849) - Option to install WP-CLI packages (#837)
- Update WP-CLI to 1.2.1 (#838)
- Auto-install Vagrant plugins (#829)
- Add Vagrant config (#828)
- Ansible 2.3 compatibility (#813)
- Remove potentially dangerous
db_import
option (#825)
- Add vault_wordpress_sites validation (#823)
- Use dynamic HostKeyAlgorithms SSH option for unknown hosts (#798)
- Accommodate deploy hook vars formatted as lists of includes (#815)
- Check Ansible version before Ansible validates task attributes (#797)
- Add additional Nginx sites configurations support (#793)
- Change
remote-user
role toconnection
role: tests host key, user (#745) - Allow customization of PHP extensions (#787)
- Allow for per-project packagist.com authentication (#762)
- Set multisite constants false while checking
wp core is-installed
(#766) - Forward extra bin/deploy.sh parameters to ansible-playbook (#748)
- Update WP-CLI to 1.1.0 (#759)
- Add DOMAIN_CURRENT_SITE to default env variables (#760)
- Fix formatting of
set_fact
foransible_become_pass
(#758) - Require Ansible 2.2.0.0 or greater (#726)
- [BREAKING] Use more secure sshd defaults (#744)
- Add basic git repo host keys to
known_hosts
(#751) - Accommodate template inheritance for nginx confs (#740)
- Add
apt_packages_custom
to customize Apt packages (#735) - Enable Let's Encrypt to detect updated
site_hosts
(#630) - Add
SKIP_GALAXY
env var to skip galaxy install in Vagrant (#734) - Avoid
loop.first
variable in conditional jinja loops (#729) - Use dynamic
local_path
to accommodate Ansible running on VM (#725) - [BREAKING] Fix #727 - HSTS: default preload to off (#728)
Vagrantfile
: add automatic support for landrush (#724)- Suppress extra output in SSL certificates (#723)
- Fix #718 - improve method of updating theme paths (#720)
- Create
/home/vagrant/trellis
bindfs mount with proper permissions (#705)
- Create
project_shared_children
files if they do not exist (#706) - Diffie-Hellman params now conditional on SSL status (#709)
- Update PHP to 7.1 (#695)
- Update WP-CLI to 1.0.0 (#708)
- Ansible-Local for Vagrant boxes on Windows (#690)
- Install MariaDB via Ubuntu's official distro packages (#693)
- Fix 404s by moving skip_cache conditions to server block (#692)
- Nginx includes: Move templates dir, fix 'No such file' error (#687)
- [BREAKING] Move shell scripts to bin/ directory (#680)
- Add myhostname to nsswitch.conf to ensure resolvable hostname (#686)
- Add
bin/xdebug-tunnel.sh
to manage Xdebug and SSH tunnels on remote hosts (#678) - Move Xdebug installation/configuration into its own role (#678)
- Disable wp-cron emails (#685)
- Make
raw_vars
compatible with play vars and Ansible 2.1 (#684) - Ensure there is always at least one PHP-FPM pool defined (#682)
- Update galaxy roles for Ansible 2.2 compatibility (#681)
- Update to WP-CLI 0.25.0 for WP 4.7 compat (#673)
- Enable per-site setup for permalink structure (#661)
- WP 4.6 Compat: set WP_HOME/SITEURL directly (#647)
- Create WordPress php-fpm conf after web_root exists (#642)
- Fix #637 - Fix condition for permalink structure task (#643)
- Fix #639 - WP 4.6 compatibility: update WP-CLI to 0.24.1 (#640)
- Ansible 2.1 compatibility fixes (#631)
- [BREAKING] Upgrade Ubuntu from 14.04 Trusty to 16.04 Xenial (#626)
- [BREAKING] Add
vault_users
for easier password management (#614) - Fix #581 - Use WP-CLI to run WP cron (#583)
- [BREAKING] Require explicit redirects and drop
www_redirect
(#622) - Fix #612 - Bump nginx_fastcgi_buffer_size to
8k
(#620) - Setup permalink structure for multisite installs too (#617)
- Fix
wp_home
option in Multisite after install in development (#616) - Add
current_path
var and default to enable custom current release path (#607) - Add Vagrant post up message (#602)
- Fix #468 - Use curl to install wp-cli tab completions (#593)
- Require Ansible 2.0.2 and remove deploy_helper (#579)
- Add connection-related cli options to ping command (#578)
- Wrap my.cnf password in quotes (#577)
- Update to WP-CLI v0.23.1 (#576)
- Fix #563 - Improve remote databases (#573)
- Fix #569 - Only skip subdomains for non-www domains (#570)
- Enable Let's Encrypt to transition http sites to https (#565)
- Fix #550 - Properly skip permalink setup for MU (#551)
- Escape salts and keys to avoid templating errors (#548)
- Add plugin to pretty print Ansible msg output (#544)
- Fix #482 - Multisite is-installed deploy check (#543)
- Skip setting permalink for multisite installs (#546)
- Fix #489 - Add $realpath_root to fastcgi_cache_key (#542)
- Move modules and plugins to
lib/trellis
directory (#538) - Automatically set
wp_home
andwp_siteurl
variables (#533) - Switch to Let's Encrypt X3 intermediate certificate and fix chain issues (#534)
- Supply better defaults for
db_name
anddb_user
(#529) - Fix deploy env template to use valid ansible vars (#530)
- Simplify and improve
wordpress_sites
with better defaults (#528) - Allow option for WinNFSD sync folder provider on Windows (#527)
- Improve Let's Encrypt challenge pre-flight tests (#526)
reverse_www
filter improvements (ignore subdomains) (#525)- Fix deprecation warnings on deploy, use current stable WP-CLI (#523)
- Fix #520 - Disable MariaDB binary logging by default (#521)
- Let's Encrypt integration (#518)
- Improve Git repo format validation (#516)
- Fix #505 - Git ignore *.retry file
- Fix Ansible deprecations for bare variables (#510)
- Fixes #508 - update php-xdebug config file path (#509)
- Add php-mbstring extension (#504)
- Add more necessary PHP extensions (#503)
- Update to latest ansible-role-mailhog version (#497)
- Add
reverse_www
filter to fixwww_redirect
(#486) - Add IP address variable, move some variables to top of Vagrantfile (#494)
- Keep Composer updated (#493)
- Use prestissimo Composer plugin (#492)
- Use ansible-role-composer (#491)
- Fix bad
curl
output (#490) - Fixes #410 - Default to 1 CPU in Vagrant (#487)
- Fix Nginx includes for Ansible 2.0 (#473)
- Use
ondrej/php
PPA sinceondrej/php-7.0
is deprecated (#479) - Fix Ansible 2.x deploys and require version 2.x (#478)
- Update to PHP 7.0 and remove HHVM (#432)
- Windows: Sync
hosts
dir with proper permissions (#460) - Fix
inventory_file
variable in connection tests (#470) - Fix conditional logic for permalink setup task (#467)
- Fix permalink setup during WordPress Install (#466)
- Fix deploy pre-flight check for verifying repo (#463)
- Ansible 2.0 compatibility (#461)
- Add pre-flight checks for common deploy problems (#459)
- Prevent duplicate hosts entries made by
vagrant-hostsupdater
(#458) - Fix README's
ansible-playbook
command for server.yml (#456) - Fix development hosts file (#455)
- Add tags to select includes and tasks (#453)
- Improve Git deploy implementation via
git archive
(#451) - Replace strip_www with optional redirect to www/non-www (#452)
- Accommodate file encryption via ansible vault (#317)
- Fixes #353 - Allow insecure curl reqs for cron (#450)
- Fixes #374 - Remove composer vendor/bin from $PATH (#449)
- Refactor hosts files (#313)
- Fixes #436 - Let WP handle 404s for PHP files (#448)
- Fixes #297 - Use
php_flag
vsphp_admin_flag
(#447) - Fixes #316 - Set WP permalink structure during install (#316)
- Switch to https://api.ipify.org for IP lookup (#444)
- Replace
vagrant-hostsupdater
withvagrant-hostmanager
(#442) - Switch to mainline Nginx, replaces SPDY with HTTP2 (#389)
- Add
wp core update-db
to deploy finalize hook (#411) - Use WP-CLI 0.21.1 (#392)
- Add variable for whitelisted IPs (#435)
- Nginx role improvements: use more h5bp configs (#428)
- Add global
deploy_before
anddeploy_after
hooks (#427) - Fix HSTS headers (#424)
- Notify Windows users about SSH forwarding (#423)
- Use append_privs for WP DB privileges (#422)
- Stop WP cron job emails (#421)
- Add WP-CLI bash completion script (#407)
- Add Composer config
github-oauth
variable (#402) - Fix copy project local files in example hook (#404)
- Update cron variable to match Bedrock (#394)
- Add deploy_build_before example hook for theme assets (#397)
- Use curl instead of dig for IP lookups (#390)
- Update SSL cipher suite (#386)
- Support for other Vagrant providers (VirtualBox, VMWare, Parallels) (#340)
- Specify versions for Ansible Galaxy requirements (#385)
- Adds ability to configure HSTS headers with site variables. (#388)
- Add dev's IP to ferm whitelist (#381)
- Add nonempty option to config.bindfs.bind_folder (#382)
- Add proper hooks for task files during deploys (#378)
- Fix logrotate's Nginx postrotate script (#377)
- Add static HTML files as fallbacks for Nginx's
index
directive (#376) - Use Windows environment variable to determine number of CPUs (#366)
- Check for galaxy roles before
vagrant up
(#365) - Install Xdebug by default in development environment (#363)
- Ensure admin_user can connect before disabling root (#345)
- Prevent PHP execution in uploads directory (#356)
- Update h5bp Nginx configs (#355)
- Convert sshd role variables to booleans (#344)
- Add check to validate
subtree_path
during deploy (#334) - Rename WP site variable
subtree
tosubtree_path
(#329) - Add extra HTTP security headers (#322)
- HHVM restart cron job fix (#327)
- Improve SSH remote user detection (#321)
- Add variable + better default for Nginx fastcgi buffers (#302)
- WP Multisite install fixes (#319)
- Re-organize
group_vars
files into subdirectories and separate files (#308)
- Capture development mail with MailHog (#304)
- Update git remote URL before cloning on deploys (#299)
- Allow user to set the timezone (#301)
- Improvements to custom Nginx includes (#242)
- Fix comment in Vagrantfile: use absolute path for ANSIBLE_PATH (#292)
- Fix remote user handling for AWS (#290)
- Allow auto-generation of self signed SSL certificate
- Merge secure-root.yml into server.yml
- Bump Ansible requirement to >= 1.9.2
- Validate that at least the minimum required version of Ansible is used
- Fix PHP error handling
- Flush wp db theme roots on deploy
- Stop recursive copying of vendor
- Update the bin/windows.sh script with absolute path
- Conditionally copy .env into web root
- Add subtree commented out
- Add Composer binary path to the default path
- Change base box to stock Ubuntu 14.04
- Rename bedrock-ansible to Trellis
- Restore strip_www functionality
- Protect against Logjam attack by generating a strong and unique Diffie-Hellman group
- Move SSH key handling to users role
- Fix multisite conditional in wordpress-site.conf
- Allow use of FastCGI caching
- Wrap octal mode in quotes
- Fix project_shared_children mode defaults
- Allow for custom permissions for shared sources
- Provide a mechanism for custom Nginx includes
- Add trailing slash to WP core rewrite, preventing possible redirect loop
- Insert full path to service command, add hhvm restart minute
- Disable exposing PHP version to the world
- wordpress-install improvements
- Nginx h5bp config improvements
- Make composer self-update idempotent
- Fix project_subtree conditional
- Remove redundant site_name when naming log files
- Fix project_subtree check
- Fix conditional check for multi-site deploys
- Fix .env generation for wordpress-install
- Mirror
server_name
in SSL and non-SSL blocks - Windows compatibility
- Add swapfile role
- Nginx: better worker_processes setting
- Use inventory_hostname instead of ansible_hostname
- Update Ansible version requirements
- Add information on how to deploy with the git strategy
- Define provider as virtualbox to avoid failure
- Don't set HSTS header over HTTP
- Add note about generating keys from the WordPress API
- Use site instead of example.com
- Be consistent with roots-example-project repo
- Add vagrant-hostsupdater to requirements
- SSL support
- Vagrant: resolve site paths relative to Ansible
- Subtree should be defined on a site
- Remove static IP from site_hosts
- Deploy improvements
- WP subdomain multisite support
- Add xdebug role
- Add logrotate role
- Add ntpd role
- Ansible deploys
- HHVM implementation
- Add SMTP role
- Install php5-memcached
- Update to PHP 5.6
- Simplify Vagrantfile
- Add better SSH defaults
- Add fail2ban, ferm for added security
- Remove naming restriction on Bedrock path
- Add vagrant-bindfs for custom NFS permissions
- Limit
sendfile off
directive to development env - Add better upload size and execution time defaults
- Use H5BP server configs
- Hardcode Vagrant VM memory to 1GB
- Replace dots in cron file names
- Use NFS for shared folders and better performance
- Tagged playbook roles
- Complete memcached implementation
- Better PHP production configs: errors and opcache
- Always set fastcgi param
SCRIPT_FILENAME
in Nginx for better version compatibility
- Ansible 1.6.8 compatibility (bug fix)
- Fix for slow network connections
- Nginx reload after DB import
- Integrate vagrant-hostsupdater
- Improve organization and file/folder structure
- MySQL password support
- Memcached role
- Improved hosts file and group_vars for separate environments
- Add roots/bedrock Vagrant box
- Add
run_composer
option towordpress_sites
so Composer can be run on the VM removing the requirement for it on the host - Remove upgrade role since we can't control package versions with it
- Initial release